index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="DNS / DHCP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="DNS / DHCP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="DNS / DHCP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="DNS / DHCP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "disk-yanbex.ru" OR destinationhostname CONTAINS "e-connection.ru" OR destinationhostname CONTAINS "strepsils.top" OR destinationhostname CONTAINS "cr87986.tw1.ru" OR destinationhostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationhostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationhostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationhostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationhostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationhostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationhostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationhostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationhostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationhostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationhostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationhostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationhostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationhostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationhostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationhostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationhostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationhostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationhostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationhostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationhostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationhostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "disk-yanbex.ru" OR sourcentdomain CONTAINS "e-connection.ru" OR sourcentdomain CONTAINS "strepsils.top" OR sourcentdomain CONTAINS "cr87986.tw1.ru" OR sourcentdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcentdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcentdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcentdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcentdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcentdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcentdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcentdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcentdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcentdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcentdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcentdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcentdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcentdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcentdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcentdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcentdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcentdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcentdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcentdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcentdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcentdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "disk-yanbex.ru" OR sourcehostname CONTAINS "e-connection.ru" OR sourcehostname CONTAINS "strepsils.top" OR sourcehostname CONTAINS "cr87986.tw1.ru" OR sourcehostname CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR sourcehostname CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR sourcehostname CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR sourcehostname CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR sourcehostname CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR sourcehostname CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR sourcehostname CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR sourcehostname CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR sourcehostname CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR sourcehostname CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR sourcehostname CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR sourcehostname CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR sourcehostname CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR sourcehostname CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR sourcehostname CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR sourcehostname CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR sourcehostname CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR sourcehostname CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR sourcehostname CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR sourcehostname CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR sourcehostname CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR sourcehostname CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "disk-yanbex.ru" OR destinationntdomain CONTAINS "e-connection.ru" OR destinationntdomain CONTAINS "strepsils.top" OR destinationntdomain CONTAINS "cr87986.tw1.ru" OR destinationntdomain CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR destinationntdomain CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR destinationntdomain CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR destinationntdomain CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR destinationntdomain CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR destinationntdomain CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR destinationntdomain CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR destinationntdomain CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR destinationntdomain CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR destinationntdomain CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR destinationntdomain CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR destinationntdomain CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR destinationntdomain CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR destinationntdomain CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR destinationntdomain CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR destinationntdomain CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR destinationntdomain CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR destinationntdomain CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR destinationntdomain CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR destinationntdomain CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR destinationntdomain CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR destinationntdomain CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND (requesturl CONTAINS "disk-yanbex.ru" OR requesturl CONTAINS "e-connection.ru" OR requesturl CONTAINS "strepsils.top" OR requesturl CONTAINS "cr87986.tw1.ru" OR requesturl CONTAINS "13252199b18d5257a60f57de95d8c6be7d7973df7f957bca8c2f31e15fcc947b" OR requesturl CONTAINS "fa8853aaa156485855b77a16a2f613d9f58d82ef63505be8b19563827089bf52" OR requesturl CONTAINS "adcd3831b9dfd7493f48b28074f6c3c32f7fd42428c7258807bf2d04cac1d753" OR requesturl CONTAINS "693e681c06e3b8f374bd5e25daa6c70d4947956f1aa5e1cb7a18f2da0844323f" OR requesturl CONTAINS "f8d0a1ae059699dac55eac5710b397282eb9542c86a2342e4161f92881cb6125" OR requesturl CONTAINS "ccff23a8f7c510b49264cdacf9ab6b43e9be0671670ce2eec75851920e6378b7" OR requesturl CONTAINS "c50ac303b9c6bf1fc2fb0350d432d5fa5df4b51c7b50f3ca26dea34918637686" OR requesturl CONTAINS "263958871937ec85816a441952cec15f8920ddadc07c83f9c1ac957ad0aeac8a" OR requesturl CONTAINS "e7e3491c6e51f5e32e4a8ac1ab46556f33f573499290c5bf4423af02b5e66a54" OR requesturl CONTAINS "464b0bcd2de186dcc76cd4632355271f4a1b168d45c65cadcfc71e9eb24347ef" OR requesturl CONTAINS "8510e78ff403ea211bfbb38966806475b8c1aa951c783d8069591950198b3495" OR requesturl CONTAINS "09dbb6194689aaad156a007294912e5370b293418c5a6c7cbd9b0a31fd8b0761" OR requesturl CONTAINS "fc957995328dbc5d866668bdbd1cfaa56869435e3a93942d5c394f3faae4709c" OR requesturl CONTAINS "d3f168ba6e7407fd6a05a52c4e73fc1a2ec3fac369a844f67b337fb67963ba7f" OR requesturl CONTAINS "9249549ed7dc1b9a7b20d546cb836383ffff41968f6cb61243feec8262d31831" OR requesturl CONTAINS "fa1ad666c4280eaf501f5475d5205efce7b356eb78a43f205c36e92188c9d6d7" OR requesturl CONTAINS "065d2b17ad499587dc9de7ee9ecda4938b45da1df388bc72e6627dff220f64d2" OR requesturl CONTAINS "4f77b979e36f940aef279869eadd25431ad4b6f1f0df9a21d92580eeeeb13028" OR requesturl CONTAINS "2a029767cb63787607dc92a8f5d7d66ec8d59111ac191a65a317f0ebc4740d82" OR requesturl CONTAINS "de1422f5d42ec545b47c30b518bcac1a40765611eb48453aa31edab447347bf3" OR requesturl CONTAINS "60665c8f8ff802fb116a4d761a812911a0cf209e5e56f48fdb566e94cc177c33" OR requesturl CONTAINS "5a959e4f856c3dba310dc0e5f8281651c35c965f476c292ad9c6ef07077d6053")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("4.103.85.47","5.252.176.55","34.236.234.165")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Microsoft Windows" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Microsoft Windows" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Content Management System" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Network Access Control / NAC" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Network Access Control / NAC" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Virtualization / Containers" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Virtualization / Containers" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Privileged User" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Privileged User" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Identity Management" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Identity Management" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Identity Access Management" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Identity Access Management" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / WiFi" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / WiFi" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://5.252.176.55/api/texts/","http://94.103.85.47/api/texts/","http://94.103.85.47/dashboard/usa.bin","http://94.103.85.47/dashboard/121.bin","http://94.103.85.47/dashboard/123.bin","https://e-connection.ru/authentification/vkmessenger.html","https://e-connection.ru/cgi-bin/vkmessenger.html","http://strepsils.top/videovm_requestmultitestlocal.php","http://cr87986.tw1.ru/l1nc0in.php","https://disk-yanbex.ru/","http://disk-yanbex.ru/","http://disk-yanbex.ru/?rid=rkwcehc","https://disk-yanbex.ru/?rid=rkwcehc","http://disk-yanbex.ru/?rid=0s1pgrr","http://disk-yanbex.ru/?rid=daoixk1","https://disk-yanbex.ru/?rid=daoixk1","http://disk-yanbex.ru/track","https://disk-yanbex.ru/track","http://disk-yanbex.ru/?rid=zcj7w6c","https://disk-yanbex.ru/?rid=d5rd7z0","https://disk-yanbex.ru/?rid=awphnia","https://disk-yanbex.ru/%d0%9f%d0%b8%d1%81%d1%8c%d0%bc%d0%be_%d0%be_%d1%81%d0%bc%d0%b5%d0%bd%d0%b5_%d0%b1%d0%b0%d0%bd%d0%ba%d0%be%d0%b2%d1%81%d0%ba%d0%b8%d1%85_%d1%80%d0%b5%d0%ba%d0%b2%d0%b8%d0%b7%d0%b8%d1%82%d0%be%d0%b2.docx")
