index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "winery.nsupdate.info" OR destinationhostname CONTAINS "su1d.nerdpol.ovh" OR destinationhostname CONTAINS "newtryex.ddns.net" OR destinationhostname CONTAINS "ftp.mgcpakistan.com" OR destinationhostname CONTAINS "plax.duckdns.org" OR destinationhostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "winery.nsupdate.info" OR sourcentdomain CONTAINS "su1d.nerdpol.ovh" OR sourcentdomain CONTAINS "newtryex.ddns.net" OR sourcentdomain CONTAINS "ftp.mgcpakistan.com" OR sourcentdomain CONTAINS "plax.duckdns.org" OR sourcentdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "winery.nsupdate.info" OR sourcehostname CONTAINS "su1d.nerdpol.ovh" OR sourcehostname CONTAINS "newtryex.ddns.net" OR sourcehostname CONTAINS "ftp.mgcpakistan.com" OR sourcehostname CONTAINS "plax.duckdns.org" OR sourcehostname CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "winery.nsupdate.info" OR destinationntdomain CONTAINS "su1d.nerdpol.ovh" OR destinationntdomain CONTAINS "newtryex.ddns.net" OR destinationntdomain CONTAINS "ftp.mgcpakistan.com" OR destinationntdomain CONTAINS "plax.duckdns.org" OR destinationntdomain CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "winery.nsupdate.info" OR requesturl CONTAINS "su1d.nerdpol.ovh" OR requesturl CONTAINS "newtryex.ddns.net" OR requesturl CONTAINS "ftp.mgcpakistan.com" OR requesturl CONTAINS "plax.duckdns.org" OR requesturl CONTAINS "ghcc.duckdns.org")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("209.126.83.213","209.126.83.213","154.12.234.207","45.133.174.122","154.12.234.207","154.12.250.38","172.245.45.213","212.193.30.230:3345","109.107.179.248:80","212.193.30.230","209.126.2.34","95.216.102.32")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Microsoft Windows" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Privileged User" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Access / Identity Management" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Identity Access Management" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e5a33b42b71f8ac1a5371888d11a0066b49a7f0c25fe74857fa07fb0c9bdff27","43f4eaefc6e71f8d30b2e3749475af51ce4d6740546706113cc4785b4410a14c","6a1bac8fbb30f4b98da7f7ac190fb971bf91d15b41748bc63fd9cbddb96ef189","2283c3be89eb6cbf0e1579a6e398a5d1f81a50793fcca22fbc6cbdab53dc2d31","75819879049e80de6376f146430e63a53fc4291d21f3db930ea872b82d07c77a","73dc35d1fa8d1e3147a5fe6056e01f89847441ec46175ba60b24a56b7fbdf2f9","8276104d8d47def986063b8fbafd82ad5f4cd23862ff9ede1231cefb35115a1b","e2b70c8552b38a6b8722d614254202c346190c6a187984a4450223eb536aaf4b","ef5a7fc0c2a301b57f0723af97faea37374b91eb3b72d8ca6ffc09a095998bb2","66c045eb61f2e589b1e27db284c9c518e5d0e87dcff25b096eede7047f7dd207","c59f95d9c9ff830d33fb73c2a8b0ee8be6619b6823fc23210600b9fa88a8c9d4","c8e326756cc1f95ff51ffe26471df16f4131fdbca2ed14f8c8d14e21010058b9","15212428deeeabcd5b11a1b8383c654476a3ea1b19b804e4aca606fac285387f","222b1a425f75fc7998a0bbabd52277cd82bb5ec50b75f4fb67568b3b754f5406","377fe4e55b6dde063c15c41389f3bb5aacf95443874bdcc0d02a44d6bd793780","bdc52f8983b7f034e86d1628efab5faf974e8c33ea9c3bcab0fd09ca462f8322","de30f2ba2d8916db5ce398ed580714e2a8e75376f31dc346b0e3c898ee0ae4cf","a5ae1b866c5d8a7b3eb8427e686cf5d0264b809ed4491b47346542bf69caab65","a748f4e526c1a5fed7e57887ef951e451236ee3ad39cf6161d18e5c2230aca0b","adb237144a52fc610984bd5ae8501271c5eef8ff49eff0a9d02adf4a5e36ad3b","dfb8ba6c2ac264ac73f6d2c440d2c0744c043f1d8435bb798fef5380a649fc4e","e1d34ad42938a777d80f3ee4c206de14021f13ab79600168b85894fdb0867b3e","328a12fdd6b485362befb392925282451d65aa23482584a49dd5b0e126218df7","0ff4aa2eb1cd681e3b77348af935bcfc56f4b7cae48bcd826000b7ff2b82b671","0b0c70ee1612139cf7a83847cca805689aec9fbcc587a7ef8f26aa4fb9e71295","1791dd7a7c7d0688fac3626d57221ada157c57572cf9ed46ad4cab3d28dbaf91","9bf99fc32dc69f213812c3c747e8dd41fef63ad0fd0aec01a6b399aeb10a166a")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Microsoft Windows" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Microsoft Windows" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Content Management System" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Network Access Control / NAC" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Network Access Control / NAC" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Virtualization / Containers" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Virtualization / Containers" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Privileged User" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Privileged User" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Identity Management" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Identity Management" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Identity Access Management" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Identity Access Management" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / WiFi" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / WiFi" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https:files.catbox.moe/rltrtq.bat","http://3.101.39.145/excel.exe","http://3.101.39.145/tpaerospace.one","http://54.151.95.132/access.one","http://54.151.95.132/excelsheel.vbs","https://www.onenotegem.com/uploads/soft/one-templates/four-quadrant.one","https://transfer.sh/get/tscdam/asyncclient.bat","http://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://depotejarat.ir/voicemail.bat","https://zaminkaran.ir/new.png","https://www.onenotegem.com/uploads/soft/one-templates/the_daily_schedule.one","https://transfer.sh/get/pcj58k/asyncclient.bat","https://onenotegem.com/uploads/soft/one-templates/weekly_assignments.one","https://transfer.sh/rmitxs/invoice212.bat","https://transfer.sh/get/cort9r/me.bat","https://stnicholaschurch.ca/dcyaz.bat","https://www.onenotegem.com/uploads/soft/one-templates/notes_to_do_list.one","https://transfer.sh/get/5dlevb/sky.bat","https://stnicholaschurch.ca/cardlock_341121.bat","https://stnicholaschurch.ca/xw.bat","https://transfer.sh/get/7msvcm/freshme.bat","https://transfer.sh/igu2k2/inv.bat","https://direct-trojan.com/file/b685b9/new%20section%201.one","https://direct-trojan.com/file/05df70/remlog.bat","https://direct-trojan.com/file/3c6f73/software-update.exe","http://198.23.172.90/new.exe","http://198.23.172.90/template.one","http://179.43.187.241/downloads/newsharedfilesnow.pdf.lnk","https://transfer.sh/get/uatsxp/newsharedfilesnow.hta","http://198.23.172.90/templa.one","http://198.23.172.90/comment.exe","https://transfer.sh/get/p29vik/tpee.bat","https://files.catbox.moe/nvz0g1.ps1","https://barricks.org/admin10/client.php","http://kanaskanas.com/fw435tv345t.ps1","https://codezian.com/nt57/300123.gif","https://myvigyan.com/m1ypt/300123.gif")
