index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("4e7cc2eadc7c9bac1930f37e25303212c8974674b21ed052a483727836a5e43","4554dc95f99d6682595812b677fb131a7e7c51a71daf461a57a57a0d903bb3fa","4ed7609cbb86ea0b7607b8a002e7f85b316903c3b6801240c9576aae8b3052ff","5adbe8d0375d6531f1a523085f4df4151ad1bd7ae539692e2caa3d0d73301293","6abbd89e6ab5e1b63c38a8f78271a97d19bafff4959ea9d5bd5da3b185eb61e6","929a591331bdc1972357059d451a651d575166f676ea51daaeb358aa2a1064b7","aae0553b761e8bb3e58902a46cd98ee68310252734d1f8d9fd3b862aab8ed5c9","bf7b5f72b2055cfc8da01bb48cf5ae8e45e523860e0b23a65b9f14dbdbb7f4ee","eef15f6416f756693cbfbfd8650ccb665771b54b4cc31cb09aeea0d13ec640cf","f9246be51464e71ff6b37975cd44359e8576f2bf03cb4028e536d7cfde3508fc","fcc49c9be5591f241ffd98db0752cb9e20a97e881969537fba5c513adbd72814")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "privacytoolz123foryou.top" OR destinationhostname CONTAINS "threesmallhills.com" OR destinationhostname CONTAINS "privacy-toolz-for-you-5000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-7000.com" OR destinationhostname CONTAINS "privacytoolzforyou7000.top" OR destinationhostname CONTAINS "privacytoolzforyou-6000.top" OR destinationhostname CONTAINS "privacy-toolz-for-you-403.top" OR destinationhostname CONTAINS "privacy-tools-for-you-777.com" OR destinationhostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "privacytoolz123foryou.top" OR sourcentdomain CONTAINS "threesmallhills.com" OR sourcentdomain CONTAINS "privacy-toolz-for-you-5000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-7000.com" OR sourcentdomain CONTAINS "privacytoolzforyou7000.top" OR sourcentdomain CONTAINS "privacytoolzforyou-6000.top" OR sourcentdomain CONTAINS "privacy-toolz-for-you-403.top" OR sourcentdomain CONTAINS "privacy-tools-for-you-777.com" OR sourcentdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "privacytoolz123foryou.top" OR sourcehostname CONTAINS "threesmallhills.com" OR sourcehostname CONTAINS "privacy-toolz-for-you-5000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-7000.com" OR sourcehostname CONTAINS "privacytoolzforyou7000.top" OR sourcehostname CONTAINS "privacytoolzforyou-6000.top" OR sourcehostname CONTAINS "privacy-toolz-for-you-403.top" OR sourcehostname CONTAINS "privacy-tools-for-you-777.com" OR sourcehostname CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "privacytoolz123foryou.top" OR destinationntdomain CONTAINS "threesmallhills.com" OR destinationntdomain CONTAINS "privacy-toolz-for-you-5000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-7000.com" OR destinationntdomain CONTAINS "privacytoolzforyou7000.top" OR destinationntdomain CONTAINS "privacytoolzforyou-6000.top" OR destinationntdomain CONTAINS "privacy-toolz-for-you-403.top" OR destinationntdomain CONTAINS "privacy-tools-for-you-777.com" OR destinationntdomain CONTAINS "privacytoolzforyou6000.top")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://2.56.59.42/EU/Yandex1500.exe")
