index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("9d6c79c0b395cceb83662aa3f7ed0123","2189aa5be8a01bc29a314c3c3803c2b8131f49a84527c6b0a710b50df661575e","3334d2605c0df26536058f73a43cb074","ba59f1ece68fa051400fd46467b0dc0a5294b8644c107646e75d225a45fff015","4f865db4192afb5bbcdeb2e899ca97a4","5ea09247ad85915a8d1066d1825061cc8348e14c4e060e1eba840d5e56ab3e4d","3c81dc763a4f003ba6e33cd5b63068cd","0329bb5b3a450b0a8f148a57e045bf6ed40eb49a62e026bd71b021a2efc40aed","19dc387bffdc0a22f640bd38af320db4","778e46f8f3641a92d34da68dffc168fdc936841c5ad3d8b44da62a7b2dfe2ee1","6d6433c328f6cdce4a80efce3a29ea3e","e63082cf4db94f06d583a6313e48353366b44ce07b7ffceacc5bc4db88bd8810","6f5e4b45ca0d8c1128d27a15421eea38","7c08b9178c05ab765a3d7754ac99f4ba1abddb226dbb6cc898bc692bba1898a1","a0483db3725f8a50078daee7fd10f9bb","77d05cc623f860ca2e6d47cdafc517aa0612de88291de7f2a3d95c5d04f1658a","7bb236041b91d4cd4fa129267cf109c3","5bcfb56c4c884e3657bbfeacca37853113d640b77dff9af519c08c4b64ca029d","5613ba2032bc1528991b583e17bad59a","808425bc599cd60989c90978d179af1d4c72dd7abfe5e0518aca44b48af15725","d5809e5f848f228634aa45ffe4a5ece0","c2cc785857c64fa1f8fbb2e359a2638f187cd77cd29ca6701e38d750e822faa4","d357fc478765a22f403c699a812f29bd","9e1a3653029b5378736ea1debba44cd81988de73b6d8689f9eba792e719da79a")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey0","https://jethropc.com/wp-admin/css/temp/hurry/?rv=papago^&za=honey1","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default0","https://www.cammirando.com/wp-admin/css/temp/movement/?ra=aaaaaa^&zw=default1","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo0","https://phasechangesolutions.com/wp-admin/css/colors/coffee/hurryup/?rv=super^&za=mongo1","https://file.drive002.com/read/get.php?cu=ln3&so=xu6502","https://downwarding.com/v2/read/get.php?vw=ln3&nv=xu6502","https://bgfile.com/v2/read/get.php?vw=ln3&nv=xu6502","https://werxtracts.com/wp-content/themes/stylish-fashion-shop/js/inc/get.php?ra=iew&zw=lk0100","https://radionaranjalstereo.com/wp-content/themes/ai-news/js/inc/get.php?ra=iew&zw=lk0100","http://serviceset.net/upload.php","http://ttzcloud.com/upload.php","http://storkse.com/upload.php","http://sibbss.com/upload.php","http://oryzanine.com/index.php","http://mq734121.info/index.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="93.183.93.185" AND destinationport=57860 OR destinationaddress="185.231.154.22" AND destinationport=52720 OR destinationaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="93.183.93.185" AND sourceport=57860 OR sourceaddress="185.231.154.22" AND sourceport=52720 OR sourceaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="93.183.93.185" AND sourceport=57860 OR translatedipaddress="185.231.154.22" AND sourceport=52720 OR translatedipaddress="62.113.118.157" AND sourceport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND destinationtranslatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND destinationtranslatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND destinationtranslatedport=57860)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="93.183.93.185" AND translatedport=57860 OR destinationtranslatedaddress="185.231.154.22" AND translatedport=52720 OR destinationtranslatedaddress="62.113.118.157" AND translatedport=57860)
