index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "lynxblog.net")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("571f5de9dd0d509ed7e5242b9b7473c2b2cbb36ba64d38b32122a0a337d6cf8b","82eb1910488657c78bef6879908526a2a2c6c31ab2f0517fcc5f3f6aa588b513","eaa0e773eb593b0046452f420b6db8a47178c09e6db0fa68f6a2d42c3f48e3bc","02472036db9ec498ae565b344f099263f3218ecb785282150e8565d5cac92461","05e4f234a0f177949f375a56b1a875c9ca3d2bee97a2cb73fc2708914416c5a9","11cfd8e84704194ff9c56780858e9bbb9e82ff1b958149d74c43969d06ea10bd","1754c9973bac8260412e5ec34bf5156f5bb157aa797f95ff4fc905439b74357a","1a7c754ae1933338c740c807ec3dcf5e18e438356990761fdc2e75a2685ebf4a","29a25e971dbb87d3adcee75693782d978a3ca9f64df0a59b015ca519a4026c49","3156ee399296d55e56788b487701eb07fd5c49db04f80f5ab3dc5c4e3c071be0","36e3c83e50a19ad1048dab7814f3922631990578aab0790401bc67dbcc90a72e","508a644d552f237615d1504aa1628566fe0e752a5bc0c882fa72b3155c322cef","64b249eb3ab5993e7bcf5c0130e5f31cbd79dabdcad97268042780726e68533f","7f104a3dfda3a7fbdd9b910d00b0169328c5d2facc10dc17b4378612ffa82d51","869d6ae8c0568e40086fd817766a503bfe130c805748e7880704985890aca947","9ac550187c7c27a52c80e1c61def1d3d5e6dbae0e4eaeacf1a493908ffd3ec7d","ca9d2440850b730ba03b3a4f410760961d15eb87e55ec502908d2546cd6f598c","d147b202e98ce73802d7501366a036ea8993c4c06cdfc6921899efdd22d159c6","e17c601551dfded76ab99a233957c5c4acf0229b46cd7fc2175ead7fe1e3d261","ee1d8ac9fef147f0751000c38ca5d72feceeaae803049a2cd49dcce15223b720","f96ecd567d9a05a6adb33f07880eebf1d6a8709512302e363377065ca8f98f56","fcefe50ed02c8d315272a94f860451bfd3d86fa6ffac215e69dfa26a7a5deced","fef674fce37d5de43a4d36e86b2c0851d738f110a0d48bae4b2dab4c6a2c373e","63e0d4e861048f581c9e5c64b28a053eb0023d58eebf2b943868d5f68a67a8b7","a0ceb258924ef004fa4efeef4bc0a86012afdb858e855ed14f1bbd31ca2e42f5","c41ab33986921c812c51e7a86bd3fd0691f5bba925fae612f1b717afaa2fe0ef")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Content Management System" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion","http://lynxbllrfr5262yvbgtqoyq76s7mpztcqkv6tjjxgpilpma7nyoeohyd(.)onion/disclosures","http://lynxblogco7r37jt7p5wrmfxzqze7ghxw6rihzkqc455qluacwotciyd(.)onion","http://lynxblogijy4jfoblgix2klxmkbgee4leoeuge7qt4fpfkj4zbi2sjyd(.)onion","http://lynxblogmx3rbiwg3rpj4nds25hjsnrwkpxt5gaznetfikz4gz2csyad(.)onion","http://lynxblogoxllth4b46cfwlop5pfj4s7dyv37yuy7qn2ftan6gd72hsad(.)onion","http://lynxblogtwatfsrwj3oatpejwxk5bngqcd5f7s26iskagfu7ouaomjad(.)onion","http://lynxblogxstgzsarfyk2pvhdv45igghb4zmthnzmsipzeoduruz3xwqd(.)onion","http://lynxblogxutufossaeawlij3j3uikaloll5ko6grzhkwdclrjngrfoid(.)onion","http://lynxch2k5xi35j7hlbmwl7d6u2oz4vp2wqp6qkwol624cod3d6iqiyqd(.)onion/login","http://lynxchatbykq2vycvyrtjqb3yuj4ze2wvdubzr2u6b632trwvdbsgmyd(.)onion/login","http://lynxchatde4spv5x6xlwxf47jdo7wtwwgikdoeroxamphu3e7xx5doqd(.)onion/login","http://lynxchatdy3tgcuijsqofhssopcepirjfq2f4pvb5qd4un4dhqyxswqd(.)onion/login","http://lynxchatdykpoelffqlvcbtry6o7gxk3rs2aiagh7ddz5yfttd6quxqd(.)onion/login","http://lynxchatfw4rgsclp4567i4llkqjr2kltaumwwobxdik3qa2oorrknad(.)onion/login","http://lynxchatly4zludmhmi75jrwhycnoqvkxb4prohxmyzf4euf5gjxroad(.)onion/login","http://lynxchatohmppv6au67lloc2vs6chy7nya7dsu2hhs55mcjxp2joglad(.)onion/login")
