index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("ca91cea6038ebc431c88d7a3280566f5","1720ae54d8ca630b914f622dcf0c1878","0a3d635eb11e78e6397a32c99dc0fd5a","ebbddbdadfa5a7e3e5f00faf27543909","93f53bf0f3db53aebcad54a4aa8cc833","5c5279eab1cbffec7d174a79e4233217","7ad281f61b89a85ae69242f9bd1a28be","cc634fe1d5087d629b141d242ff49732","7fa8bb8c90a1d1864a5eda90bb8fa2a3","eef779774586e59a0e387f7ce06b092e","b8a464741d16dcf046b1e27d63f62bcd","e631b2f8496c40e54951a2daebfc73ae","ad1b6380efb0aad16f01bd1a23f2e649","3e38ed7d2168d8170c50db86e5ebd99c","ae95cf0cd0e1a5cd6561ae3a17968dec","a650de5d94dd938d9fd0cf55fae83dd6","c9da1fa9e874b68df14788c80ca5cfee","319444e7bd7a20caef38dfcf22948f3c","b822d8162dd540f29c0d8af28847246e","d8fe02b0e134e8c9c338a784d2afacae","54be0a494baaf99ea3f88bdf6557c282","77cb1d0ddf20461b35ccd60bc9e9693f","1efe4a0981876ea7ec1780e21b0738a2","bec87849d25eef2e41c0c2e42c90b044","e1af82438339a1dd406479b884aba6f8","ac65e7d08e48c6d20e3f90f7d9f73d8b","cb347961b2f25f91639c16431e224002","b6071ff11d4b41e52143ec5ba416131a","2463a3ed222be9d564e380b19522c481","bf2d01c8cf111170589e52447b904163","d883399966cb29c7c6c358b7c9fdb951","a1af186d95ed7de686bd2e59e826f265","1396f720bc7615385bc5df49bbd50d29","a07a315d5e05d4970a57d3c499f5c9dc","ac04dfc7ccd9cc317b73f5860da94e7a","a73e489b730cf730bd51ac790995d635","afe38f5b0feeb4da163ca2d2ce85379b","aa7faa3465f31f2f3343fe3646af2fba","a77833d689be13eae622d48f8a5a8b12","abd0b2779bdf3b0dd8b2a97815501850","d6a491618a97e0044cc5f319d58c2dac","778547b3e0371ba048c32010b0dc42de","d49f22104d979efb5e2da383fea403fe","f1b6f87fd82f20f68f8624d63abda57d","cadbc701381ed49c37ee3452171e0934","a6b71ac86b1267385950815b7d18861b","fd4902b8a4a4718f5219b301475e81aa","eff9b8e1ee17cd00702279db5de39a3c","63b25fb5c4a41103d8f30659b3ed2c27","b662b3fc9174e608718072ea55b37472","43cc3810b86a27e4a15349bbcad3e8e4","ef42dc2b27db73131e1c01ca9c9c41b6","ead29687b7c4e76c59269e76a85341b7","bf6c7302cb2bbad454ad4302152285fe","74c0c5b81124b13b05b9c8792d50597e","1f0265c7fe4560d66f722e4264e717db","3b5a6b3a04ac5c2902ede522614c868c","6ebae56d4cc2a9a9454603b6116fa1a4","05472d6ee747a0e8aff33cf4e5d1141c","602df3a5732f8d8be2d9d6d8b8c48105","aca0516142f102aba41e046a340f24e9","cdc613712ac2ab85d6a0d314bb95a082","3e597147b7f94ea1cce064c11edffc42","c0a2202236b0db4702e2ed521aef048c","bee81874f719d61093f7ce12b2641ee4","d49f22104d979efb5e2da383fea403fe","6a802a1dbdb11b8ac086c7a335a212b4","a956cbab8fd7eaaf0c7dc8c7fd314a12","c30b3a305bb180d7dc28e4cdfcda8bdf","ea324dd1dbc79fad591ca46ead4676a1","04a186f53fdc9e871cb408df9c4a93ad","56d573d4c811e69a992ab3088e44c268","114c1a7d605f57752450a4985d143337","b18bd12e615dca9094aac74740f0d154","1f3dac514c6f7542d84763dfd1c622b9","944d16d2e96dbb4092941857a66f3e07","deb655a7a79832e2313e40d8d901f958","3a2f2086ac104d71f450b30ab47e36d5","04061f6e1a0463131ed129bcb03003d5","0db49f572bb1634a4217b5215b1c2c6f","a21dfecebfb3bc499f805c71a6584f2b","b7c1de8c84583465a78202f46bae4065","13bacd239931b7a1bea2f91a3c5f4d79","a8cb8aed839878d4ca028c8f43bbfab3","61c22386df656f32f45bc1928a1e5a94","d2a2e167f68e02b3713052ee3d63e013","afe6d7985388013e32ae388a29600ae2","619016de4589ecb7039844a7c9a3f326","1fa4d31f8ce38b0660cfbee3da26ca63","a8cea2eb313a908037bcc273b99a434d","0330921c85d582deb2b77a4dc53c78b3","c0636b98f0c20fa82870d10ffd21dfe1","e8efc4a7d41d754968199aebbfba77db","03e40d5f54940d3da97aa8ff981551a2","bf164f4ffe8f571666e6ffdabba9d08f","c35b13ca7dc705361237e341af7a7e08","a7ce8ea97df340e6f7a77dcbe065a617","0ad6bf767f5c45a6faf32a40c5807057","ac7ebe2cb77dd9ac74bc55931e91bc23","d698739648717c21e7eb2ba1806e673a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("a7e96388fef3ac919f9f6703d7c0ebd4","bf868371dd78162283a193940a1ae9fd","c14e101c055c9cb549c75e90d0a99c0a","d25250dca84aad3747418432c52be231","4dd1c71eee084eafdd0e9a29bd4d2e59","557bcc59ab20c44eb5b84c5073199983","fedeb97850c1d917fbe3aeac388efd35","9ca885835c2c08af33ccf9e094358ea6","b1c18520937d259d253d07e085d9e2b0","5b7780fc5e535eb507d86a54db70dee2","489c42a45b233acc377d10e1ec424b4b","b7818efa622a88d0c59e9c744cc91d43","28094131dfc2c92d57a665c7fbc4fc0e","af79639a14200ea25410b902fe0d5ee7","6be54d26001bd55770e3259562046ab2","dccff8250ab9f275b367688e0eba7ec6","550dce15c334bc6b46c41c705d197e19","c095d257983acca64eb52979cfc847ef","a2e70ef708c06fdc57b0079dda4f89fe","93bed674dacbf3959c103711164747bf","60bff49b10afc593f67888c4f767ea36","e6714e3bd83b4a349ab48cc203b91813","bfd3e1a3926fd5ef4eec1ac533f2ee34","e60b8ddee18e295d9e33e490eafdbfb3","96212539955ef86074398485c46e0483","169a58a0743301ebc5a536d890f10c06","aaad5fe071f985c57164a2766d4d8a89","c7a48f4f6ade403e09c3bac7185e92ee","60a083a1b7cd5e9a30212dc9541e161d","c57f16bd980eec7340d1e541877f0098")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "pahiclisting.ddns.net" OR destinationhostname CONTAINS "bzone.no-ip.biz" OR destinationhostname CONTAINS "johnmarcus.zapto.org" OR destinationhostname CONTAINS "ramesh212121.zapto.org" OR destinationhostname CONTAINS "atlaswebportal.zapto.org" OR destinationhostname CONTAINS "testingnew.no-ip.org" OR destinationhostname CONTAINS "nepal3.msntv.org" OR destinationhostname CONTAINS "socialstatistics.zapto.org" OR destinationhostname CONTAINS "socialstudies.zapto.org" OR destinationhostname CONTAINS "gayakwaad.com" OR destinationhostname CONTAINS "knudandersen.zapto.org" OR destinationhostname CONTAINS "jasonhistoryarticles.read-books.org" OR destinationhostname CONTAINS "duniaenewsportal.ddns.net" OR destinationhostname CONTAINS "vinaychutiya.no-ip.biz" OR destinationhostname CONTAINS "researchplanet.zapto.org" OR destinationhostname CONTAINS "greenpeacesite.com" OR destinationhostname CONTAINS "new-agency.us" OR destinationhostname CONTAINS "chivalkarstone.com" OR destinationhostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "pahiclisting.ddns.net" OR sourcentdomain CONTAINS "bzone.no-ip.biz" OR sourcentdomain CONTAINS "johnmarcus.zapto.org" OR sourcentdomain CONTAINS "ramesh212121.zapto.org" OR sourcentdomain CONTAINS "atlaswebportal.zapto.org" OR sourcentdomain CONTAINS "testingnew.no-ip.org" OR sourcentdomain CONTAINS "nepal3.msntv.org" OR sourcentdomain CONTAINS "socialstatistics.zapto.org" OR sourcentdomain CONTAINS "socialstudies.zapto.org" OR sourcentdomain CONTAINS "gayakwaad.com" OR sourcentdomain CONTAINS "knudandersen.zapto.org" OR sourcentdomain CONTAINS "jasonhistoryarticles.read-books.org" OR sourcentdomain CONTAINS "duniaenewsportal.ddns.net" OR sourcentdomain CONTAINS "vinaychutiya.no-ip.biz" OR sourcentdomain CONTAINS "researchplanet.zapto.org" OR sourcentdomain CONTAINS "greenpeacesite.com" OR sourcentdomain CONTAINS "new-agency.us" OR sourcentdomain CONTAINS "chivalkarstone.com" OR sourcentdomain CONTAINS "newmms.ru")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "pahiclisting.ddns.net" OR sourcehostname CONTAINS "bzone.no-ip.biz" OR sourcehostname CONTAINS "johnmarcus.zapto.org" OR sourcehostname CONTAINS "ramesh212121.zapto.org" OR sourcehostname CONTAINS "atlaswebportal.zapto.org" OR sourcehostname CONTAINS "testingnew.no-ip.org" OR sourcehostname CONTAINS "nepal3.msntv.org" OR sourcehostname CONTAINS "socialstatistics.zapto.org" OR sourcehostname CONTAINS "socialstudies.zapto.org" OR sourcehostname CONTAINS "gayakwaad.com" OR sourcehostname CONTAINS "knudandersen.zapto.org" OR sourcehostname CONTAINS "jasonhistoryarticles.read-books.org" OR sourcehostname CONTAINS "duniaenewsportal.ddns.net" OR sourcehostname CONTAINS "vinaychutiya.no-ip.biz" OR sourcehostname CONTAINS "researchplanet.zapto.org" OR sourcehostname CONTAINS "greenpeacesite.com" OR sourcehostname CONTAINS "new-agency.us" OR sourcehostname CONTAINS "chivalkarstone.com" OR sourcehostname CONTAINS "newmms.ru")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "pahiclisting.ddns.net" OR destinationntdomain CONTAINS "bzone.no-ip.biz" OR destinationntdomain CONTAINS "johnmarcus.zapto.org" OR destinationntdomain CONTAINS "ramesh212121.zapto.org" OR destinationntdomain CONTAINS "atlaswebportal.zapto.org" OR destinationntdomain CONTAINS "testingnew.no-ip.org" OR destinationntdomain CONTAINS "nepal3.msntv.org" OR destinationntdomain CONTAINS "socialstatistics.zapto.org" OR destinationntdomain CONTAINS "socialstudies.zapto.org" OR destinationntdomain CONTAINS "gayakwaad.com" OR destinationntdomain CONTAINS "knudandersen.zapto.org" OR destinationntdomain CONTAINS "jasonhistoryarticles.read-books.org" OR destinationntdomain CONTAINS "duniaenewsportal.ddns.net" OR destinationntdomain CONTAINS "vinaychutiya.no-ip.biz" OR destinationntdomain CONTAINS "researchplanet.zapto.org" OR destinationntdomain CONTAINS "greenpeacesite.com" OR destinationntdomain CONTAINS "new-agency.us" OR destinationntdomain CONTAINS "chivalkarstone.com" OR destinationntdomain CONTAINS "newmms.ru")
