index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cheetahsnv.com" OR destinationhostname CONTAINS "ponraj.com" OR destinationhostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cheetahsnv.com" OR sourcentdomain CONTAINS "ponraj.com" OR sourcentdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cheetahsnv.com" OR sourcehostname CONTAINS "ponraj.com" OR sourcehostname CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cheetahsnv.com" OR destinationntdomain CONTAINS "ponraj.com" OR destinationntdomain CONTAINS "altiordp.com")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "cheetahsnv.com" OR requesturl CONTAINS "ponraj.com" OR requesturl CONTAINS "altiordp.com")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("e67f8b91555993e6315ffa9b146c759b9eeac5208116667fa4b31c717ebe5398","675ede331d690fff93579f9767aa7f80cfbc9d4b99afe298ba3b456ee292ac71","c136b1467d669a725478a6110ebaaab3cb88a3d389dfa688e06173c066b76fcf","00cf43f66d27692f25da1771dca7bf8c3c0e5aa78b35090013b013c17ceb0fff","b9711d8d6d1fd59ea9276a70e0b37c28ae26a105c325448e5d62f7858d61b8c2","7f976e221ece8acac5f6ea32d2ad427a9bcb237e6a6f754043265073cc004ce1","42679bd369a3b772c43b9ba20bf8a31a2593a360cfa2de77aa6d2023f9a0c109","ffb1559beeaec3262be121c2f41d3d15bf193531b7a2b9a73abfef6d805bd64f","3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899","f4e2f28169e0c88b2551b6f1d63f8ba513feb15beacc43a82f626b93d673f56d","60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92","956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd","38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5","6795d760ce7a955df6c2f5a062e296128efdb8c908908eda4d666926980447ea","213af995d4142854b81af3cf73dee7ffe9d8ad6e84fda6386029101dbf3df897","ae1399c7b00710cdd7c119bee4b42c107bfee79c399b27a497a19094150f53ad","8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18","d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368","4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b","2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703","fc6f9dbdf4b9f8dd1f5f3a74cb6e55119d3fe2c9db52436e10ba07842e6c3d7c","fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://altiordp.com/cdn/www.php","https://cheetahsnv.com/cdn-js/wds.min.php","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/1.bat?964084","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/tempy.7z","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/7zz.exe","https://ponraj.com/05e2f56dd5d8c33a6c402a19629be61c__9336ebf25087d91c818ee6e9ec29f8c1/2.bat")
