index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Proxy" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Flow" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Server" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="DNS / DHCP" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Email / Email Security" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Web Application Firewall" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Endpoint management systems" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Microsoft Windows" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Services / Applications" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Audit" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / VPN" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Content Management System" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Unix / Linux / AIX" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Network Access Control / NAC" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Virtualization / Containers" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Privileged User" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Access / Identity Management" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Identity Access Management" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Authentication / WiFi" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Cloud Application Security Broker" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Source Code Repository" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND ipaddress NOT NULL AND ipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND translatedipaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND deviceaddress NOT NULL AND deviceaddress IN ("199.195.251.190","172.81.41.196","103.149.137.124","103.149.137.138","46.249.32.181","37.44.238.148","37.44.238.185","37.44.238.217","69.67.150.36","37.44.238.144","103.149.137.192","185.122.204.30","45.125.236.14","173.247.227.66","173.247.227.70","45.95.55.188","2.58.113.79","45.95.55.24","45.95.55.218","45.95.55.189","193.142.146.35","37.139.129.11","78.135.85.70","45.137.21.166","195.178.120.183","195.133.81.29","5.253.246.67","45.61.184.133","45.61.184.118","149.5.173.33","163.123.143.226","45.61.188.148","103.207.38.165","45.13.227.115","176.97.210.147","163.123.143.200","185.44.81.62","38.22.109.7","147.182.132.144","205.185.126.88","209.141.51.43","198.98.52.213","45.95.55.185","20.249.89.181","3.235.28.168","185.216.71.157","185.246.221.220")
index=activity AND rg_functionality="Next Generation Firewall" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Next Generation Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Proxy" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Proxy" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Proxy" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Flow" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Flow" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Flow" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Server" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Server" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Server" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="DNS / DHCP" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="DNS / DHCP" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="DNS / DHCP" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Application Firewall" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Application Firewall" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Web Application Firewall" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint management systems" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint management systems" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint management systems" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Content Management System" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Microsoft Windows" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Microsoft Windows" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Microsoft Windows" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Services / Applications" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Services / Applications" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Audit" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Audit" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / VPN" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / VPN" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / VPN" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Content Management System" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Content Management System" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Content Management System" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Network Access Control / NAC" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Network Access Control / NAC" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Virtualization / Containers" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Virtualization / Containers" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Privileged User" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Privileged User" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Privileged User" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Identity Management" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Identity Management" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Access / Identity Management" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Identity Access Management" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Identity Access Management" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Identity Access Management" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / WiFi" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / WiFi" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Source Code Repository" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Source Code Repository" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Source Code Repository" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("26e96945ee32199536d4c85124a24c28e853b557eb31f3907d19f08b9798dff4","1967370203138b9324f11c5cb3fd15ac8d2f0c585373486614600b676a4e2641","78953c71318fb93fa90607039bceb48f2746a8abfa3a9a8914c8fdc48ebf55df","57d39a6a88093c9e1fbc1626105d714be92680bdf666279b7663bcaaf7fa7e6e","78b55d3f1b34f1154a28ce4fc855252bc3104a07944053facf6acce9195b2e77","81e581ed06515af959c8477442243f20baa77c0e54a1054542900936c6e81ff5","ab3de77616b4d85f032a226da6c3629de4a8f1c1b4d32674c1bed30afb9419e1","a877b4e71c8f2f4ab6915cbe8c57c82ac12331e183f7cbda2de4dc3780a50379","5e647d4991f9d339e6e83cee6168915e1e2c9fac0cddc53d3083cbc96a278035","6bca8cf5e48e819179f8473e4e600da2c1ef00802bf1744885dcb5ad56618943","bc03af5c06a7ff6774688e8d71f6d06e0d402f4f86d5b23969bc53d5eab3e522","67f73e1efa3c3a05e896567dfb2cef56e9b5eb33283a13e5934900030357e7e6","ebfedbcf428215d34d8f876fb9c5658048dbb4c5607f328ae155bf26a292b38d","e0fd14114737e4a599f0769683de4faf54cefae1cc106d9f475aa23bdbf5a753","5967a4889b54b97adbb6b949ffd590fa416599326eb3432f40fa142aab1df795","ff8a1abcd4fa94ffc0f1f43a92f816e6bd08272ec54d748cf004c3ef1323d5d9","080a64d595ff246d01b920d5010cffcb4ac56f224acdec32ee3eab08099c6a7b","e1d3adcb85298a08973b7ae6702cc4830d20ebde98e2eac85179c1bbba3ef7ac","edec8e8d4c2ec0c489e4c5dbb89994c223f29e8d4470825bd488bf1a44e42751","28d6dce95ffb8186ac8c611dee0681cca028bbf93365e4f0c7c67c235d3034a3","97878c28d915e2b56e7c06436d209a9198eb0c50bdfb1fd4602e9e95b5eb4321","637dc2a8baf2a46ffe872aedc823ab766b4a9fbab129b2c7dc9513ba8ee712bc","0d2c3120464184610ac939c34e5309968bd7b81255708307d545d742f3468930","f3a3e90ea713215a4d30f0f142d6ef0f1ed72b246ee297b8bba64921dbf4300c","3f8b5887ae0ef8b51845bf0f2996c4f9891cdc0724b7d0ccc3dbc1b4cdae11a2","1a70ceb57768d3e027e307abd09548f151a8d6da72532f1b88e9813eaf0bdad2","2ef3040947c9d51317e103457a6613ac9297cb610b3691ef6d440f15cb36a9ed","9b7eb2cf51d806076e1662ca4ad800c1de421234c19fbea44b56eb47cc616fd8")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="DNS / DHCP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="DNS / DHCP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="DNS / DHCP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="DNS / DHCP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint management systems" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint management systems" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint management systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint management systems" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Microsoft Windows" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Microsoft Windows" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Microsoft Windows" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Microsoft Windows" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Audit" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Audit" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Audit" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Audit" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Content Management System" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Unix / Linux / AIX" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Unix / Linux / AIX" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Unix / Linux / AIX" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Network Access Control / NAC" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Network Access Control / NAC" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Network Access Control / NAC" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Network Access Control / NAC" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Virtualization / Containers" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Virtualization / Containers" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Virtualization / Containers" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Virtualization / Containers" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Privileged User" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Privileged User" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Privileged User" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Privileged User" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Identity Management" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Identity Management" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Identity Management" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Access / Identity Management" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Identity Access Management" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Identity Access Management" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Identity Access Management" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Identity Access Management" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / WiFi" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / WiFi" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / WiFi" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / WiFi" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://185.216.71.157/bins_bot_hicore_amd64","http://185.216.71.157/bins_bot_hicore_arm64","http://185.216.71.157/bins_bot_hicore_arm","http://185.216.71.157/bins_bot_hicore_mips","http://185.216.71.157/bins_bot_hicore_mips64","http://185.216.71.157/bins_bot_hicore_ppc64","http://185.216.71.157/bins_bot_hicore_ppc64le","http://185.216.71.157/bins_bot_hicore_s390x","http://185.216.71.157/bins_bot_hicore_mipsle","http://185.216.71.157/bins_bot_hicore_mips64le","http://185.246.221.220/bins_bot_hicore_s390x","http://185.246.221.220/bins_bot_hicore_ppc64le","http://185.246.221.220/bins_bot_hicore_ppc64","http://185.246.221.220/bins_bot_hicore_mipsle","http://185.246.221.220/bins_bot_hicore_mips","http://185.246.221.220/bins_bot_hicore_arm64","http://185.246.221.220/bins_bot_hicore_arm","http://185.246.221.220/bins_bot_hicore_amd64","http://185.205.12.157/trc/trc.mpsl","http://172.81.41.196/trc/trc.mpsl","http://135.148.104.21/mipsel","http://199.195.251.190/trc/trc.mpsl","http://37.44.238.178/d/xd.mpsl","http://176.97.210.135/assailant.mpsl","http://198.98.56.129/trc/trc.mpsl","http://141.98.6.249/billy.sh","http://45.140.141.205/bins/sora.mpsl")
