index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("bcd9b7d4ca83e96704e00e378728db06291e8e2b50d68db22efd1f8974d1ca91","07d2cb0dc0cd353fb210b065733743078e79c4a27c42872cd516a6b1fb1f00d1","00ec8f3900336c7aeb31fef4d111ee6e33f12ad451bc5119d3e50ad80b2212b0","15da5b0a65dd8135273124da0c6e52e017e3b54642f87571e82d2314aae97eec","180a935383b39501c7bdf2745b3a334841f01a7df9d063fecca587b5cc3f5e7a","24dd5c33b8a5136bdf29d0c07cf56ef0e33a285bb12696a8ff65e4065cb18359","76c9780256e195901e1c09cb8a37fb5967f9f5b36564e380e7cf2558652f875b","28c87170f2525fdecc4092fb347acd9b8350ed65e0fd584ce9fc001fd237d523","ac261ac26221505798c65c61a207f3951cc7dce2e1014409d8a765d85bfd91d4","92506fe773db7472e7782dbb5403548323e65a9eb2e4c15f9ac65ee6c4bd908b","c84c84387f0b9e7bc575a008f36919448b4e6645e1f5d054e20b59be726ee814","7355656f894ae26215f979b953c8fa237dc39af857a6b27754a93adb1823f3b6","8f40ff286419eb4b0c4d15710dc552afb2c2a227a180f4b4f520d09b05724151","9101975f7aca998da796fc15a63b36ab8aa0fe0aed0b186aaed06a3383d5f226","4f0c9c6fc1287ef16f4683db90dd677054a1f834594494d61d765fa3f2e1352c","cb307d7fa6eaac6a975ad64ff966ff6b0b0fdd59109246c2f6f5e8d50a33e93c","361b0157ef63d362fdd4399288f5f6a0e1536633dfb49c808a3590718c4d8f10","e71c9ac9ddd55b485e636840da150db5cd2791d0681123457bd40623acd8311c","8ae3be9f09f5fc64ec898a4d6467b2f6e50eaaa26fc460a4f1a9b9566e97a9a7")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://qaswrahc.com/wp-content/out/mn.php","http://tusaceitesesenciales.com/mn.php","http://carwashdenham.com/mn.php","https://intellectproactive.com/dist/out/mn.php","https://masar-alulaedu.com/wp-content/woocommerce/out/berr.php","https://egyfruitcorner.com/wp-content/tareq/out/berr.php","https://tech21africa.com/wp-content/uploads/out/berr.php","https://www.posao-austrija.at/images/out/lim.php","https://logisticavirtual.org/wp-content/out/lim.php","https://adecoco.us/wp-content/out/lim.php","https://acsdxb.net/wp-content/out/lim.php")
