index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("408152285671bbd0e6e63bd71d6abaaf","5efc7d824851be9ec90a97d889a40d23","f42849076e24b7827218f7a25bc11ccc","92093dd7ba6ae8fe34a215c4c4bd1cd4","e6f6a6de285d7c2361c32b1f29a6c3f6","b3b09819f820a4ecd31f82f369000af2","3c4b3d1480952d6ddfe434fef07054f7","cdb37db4543dde5ca2bd98a43699828f","22633ef920f0093e3d720e7bbeb9fec8","d617f43163cb0f355dbf63058aa82d1d","150d444848a02be230ed9fbf3692d226","43ea387b8294cc4d0baaef6d26ff7c72","4d9067e7cf517158337123a30a9bd0e3","8542a3cbe232fe78baa0882736c61926","777d6f907da38365924a0c2a12e973c5","470c6ee61b4314721a8cc9ebafe8fef8","1b08725acc371f6b7d05bb72d0c2d759","40b5ac87ff87634c48fdd2cf64ccb66b","199045538d9c139f9cf562d5b76a5cd5","4b8e97260d9ef6ca774675be682d9c8c","5b0a28631ca106c31e1d5e81d8e25297")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="158.247.194.125" AND destinationport=80 OR destinationaddress="45.77.44.119" AND destinationport=80 OR destinationaddress="151.236.20.30" AND destinationport=80 OR destinationaddress="103.140.239.63" AND destinationport=80 OR destinationaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="158.247.194.125" AND sourceport=80 OR sourceaddress="45.77.44.119" AND sourceport=80 OR sourceaddress="151.236.20.30" AND sourceport=80 OR sourceaddress="103.140.239.63" AND sourceport=80 OR sourceaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="158.247.194.125" AND sourceport=80 OR translatedipaddress="45.77.44.119" AND sourceport=80 OR translatedipaddress="151.236.20.30" AND sourceport=80 OR translatedipaddress="103.140.239.63" AND sourceport=80 OR translatedipaddress="103.57.248.202" AND sourceport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND destinationtranslatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND destinationtranslatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND destinationtranslatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND destinationtranslatedport=81)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="158.247.194.125" AND translatedport=80 OR destinationtranslatedaddress="45.77.44.119" AND translatedport=80 OR destinationtranslatedaddress="151.236.20.30" AND translatedport=80 OR destinationtranslatedaddress="103.140.239.63" AND translatedport=80 OR destinationtranslatedaddress="103.57.248.202" AND translatedport=81)
