index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("ppaauuaa11232.cc/dlx5rc.dotm","ppaauuaa11232.cc/aaa.exe")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","7fb11398c5be61445bee1efa7c9caa31","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","2a4f6fea8b4e726d01b0d1b1e629d3a392e063c1","32844e92bbd498244e3a2d8486181ae4","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","465f5b6de78ee184f1ee3400e4edaa0e85558d9e","44e8c23bfb649ecf4cb753ec332899dd","c690148b6baec765c65fe91ea9f282d6a411ae90c08d74d600515b3e075e21b2","ed555f0162ea6ec5b8b8bada743cfc628d376274","a8e0d56f8c67f1f7b6e592c12d87acab","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","faafd96ac68278360353c35d0bf3d5a353292f11","bd440d2c348b4cc4b6ad75f92d9e1c13","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","e93b5c6fc09c21fe63465416b1ec1e7487814531","612d76c9554ae70cb8596d4adc05e4d4","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","c2a321b6078acfab582a195c3eaf3fe05e095ce0","628e4a77536859ffc2853005924db2ef","D826A846CB7D8DE539F47691FE2234F0FC6B4FA0","0d38f8bf831f1dbbe9a058930127171f24c3df8dae81e6aa66c430a63cbe0509","9a34909703d679b590d316eb403e12e26f73c8e479812f1d346dcba47b44bc6e","39c363d01fb5cd0ed3eeb17ca47be0280d93a07dda9bc0236a0f11b20ed95b4c","80e8defa5377018b093b5b90de0f2957f7062144c83a09a56bba1fe4eda932ce","391a97a2fe6beb675fe350eb3ca0bc3a995fda43d02a7a6046cd48f042052de5","506f3b12853375a1fbbf85c82ddf13341cf941c5acd4a39a51d6addf145a7a51","742489bd828bdcd5caaed00dccdb7a05259986801bfd365492714746cb57eb55","a56b41a6023f828cccaaef470874571d169fdb8f683a75edd430fbd31a2c3f6e","b951e30e29d530b4ce998c505f1cb0b8adc96f4ba554c2b325c0bd90914ac944","c6cf5fd8f71abaf5645b8423f404183b3dea180b69080f53b9678500bab6f0de","d61af007f6c792b8fb6c677143b7d0e2533394e28c50737588e40da475c040ee","f9b9d45339db9164a3861bf61758b7f41e6bcfb5bc93404e296e2918e52ccc10","fd98e75b65d992e0ccc64e512e4e3e78cb2e08ed28de755c2b192e0b7652c80a","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","eed31d16d3673199b34b48fb74278df8ec15ae33","2d8b6275dee02ea4ed218ba2673b834e","97c07d03556ddcfc8ebfa462df546eb5","45dfdde3df07b6ccc23b7ae6e3dc1212","77c5fb080bf77f099c5b5f268dcf4435","738bee5280d512a238c3bb48c3278f63","7b74e4fb9a95f41d5d9b4a71a5fe40b9","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34","a512215a000d1b21f92dbef5d8d57a420197d262","729eb505c36c08860c4408db7be85d707bdcbf1b","10039d5e5ee5710a067c58e76cd8200451e54b55","ff01473073c5460d1e544f5b17cd25dadf9da513","e35a702db47cb11337f523933acd3bce2f60346d","82bd4273fa76f20d51ca514e1070a3369a89313b","091b490500b5f827cc8cde41c9a7f68174d11302","0815277e12d206c5bbb18fd1ade99bf225ede5db","f2a72bee623659d3ba16b365024020868246d901","38745539b71cf201bb502437f891d799","A736269F5F3A9F2E11DD776E352E1801BC28BB699E47876784B8EF761E0062DB","c597c75c6b6b283e3b5c8caeee095d60902e7396536444b59513677a94667ff8","917e115cc403e29b4388e0d175cbfac3e7e40ca1742299fbdb353847db2de7c2","ced1c9fabfe7e187dd809e77c9ca28ea2e165fa8","371353e9564c58ae4722a03205ac84ab34383d8c","c2a321b6078acfab582a195c3eaf3fe05e095ce0","2c0eeb266061631845a9e21156801afd","ad1b5253f07584c0d0c2d3caaf38af34")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / VPN" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / VPN" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / VPN" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / VPN" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "orangebronze.com" OR destinationhostname CONTAINS "info.openjdklab.xyz" OR destinationhostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationhostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationhostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationhostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationhostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationhostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationhostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationhostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationhostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationhostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationhostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationhostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationhostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationhostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationhostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationhostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationhostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationhostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationhostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "orangebronze.com" OR sourcentdomain CONTAINS "info.openjdklab.xyz" OR sourcentdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcentdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcentdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcentdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcentdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcentdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcentdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcentdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcentdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcentdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcentdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcentdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcentdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcentdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcentdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcentdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcentdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcentdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcentdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "orangebronze.com" OR sourcehostname CONTAINS "info.openjdklab.xyz" OR sourcehostname CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR sourcehostname CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR sourcehostname CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR sourcehostname CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR sourcehostname CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR sourcehostname CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR sourcehostname CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR sourcehostname CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR sourcehostname CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR sourcehostname CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR sourcehostname CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR sourcehostname CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR sourcehostname CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR sourcehostname CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR sourcehostname CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR sourcehostname CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR sourcehostname CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR sourcehostname CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR sourcehostname CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "orangebronze.com" OR destinationntdomain CONTAINS "info.openjdklab.xyz" OR destinationntdomain CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR destinationntdomain CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR destinationntdomain CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR destinationntdomain CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR destinationntdomain CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR destinationntdomain CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR destinationntdomain CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR destinationntdomain CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR destinationntdomain CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR destinationntdomain CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR destinationntdomain CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR destinationntdomain CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR destinationntdomain CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR destinationntdomain CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR destinationntdomain CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR destinationntdomain CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR destinationntdomain CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR destinationntdomain CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR destinationntdomain CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "orangebronze.com" OR requesturl CONTAINS "info.openjdklab.xyz" OR requesturl CONTAINS "lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion" OR requesturl CONTAINS "lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion" OR requesturl CONTAINS "lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion" OR requesturl CONTAINS "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion" OR requesturl CONTAINS "lockbitapt6vx57t3eeqjofwgcglmutr3a35nygvokja5uuccip4ykyd.onion" OR requesturl CONTAINS "lockbitapt72iw55njgnqpymggskg5yp75ry7rirtdg4m7i42artsbqd.onion" OR requesturl CONTAINS "lockbitaptawjl6udhpd323uehekiyatj6ftcxmkwe5sezs4fqgpjpid.onion" OR requesturl CONTAINS "lockbitaptbdiajqtplcrigzgdjprwugkkut63nbvy2d5r4w2agyekqd.onion" OR requesturl CONTAINS "lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion" OR requesturl CONTAINS "lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion" OR requesturl CONTAINS "lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion" OR requesturl CONTAINS "lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion" OR requesturl CONTAINS "lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion" OR requesturl CONTAINS "lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion" OR requesturl CONTAINS "lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion" OR requesturl CONTAINS "lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion" OR requesturl CONTAINS "lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion" OR requesturl CONTAINS "lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion" OR requesturl CONTAINS "lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint Management Systems" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("82.102.20.219","51.15.18.180","52.237.96.13","62.76.112.121","167.172.239.68","82.202.247.81","185.202.2.121","51.89.134.150","104.237.255.254","54.38.212.197","149.28.137.7","45.32.108.54","139.180.184.147","194.26.29.13")
