index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("b72ac58d599e6e1080251b1ac45a521b33c08d7d129828a4e82a7095e9f93e53","9345d52abd5bab4320c1273eb2c90161","9572312a12605c6a6ea6447af6fc063f4196aeba523ed38ce2c5ff51c33d4831","9a1c49322a9d950c047c2edfc781b778","ceb93ee3093dbf1a49918ede81055018d9c0f0945a97f904a16951010cfbce61","c60b41f0981f617fa83a73704a10e147","512a83f1a6c404cb0ba679c7a2f3aa782bb5e17840d31a034de233f7500a6cb9","e0bce049c71bc81afe172cd30be4d2b7","006e5fe0c01712391c54319a9d1579d7208f3cfa9f49fe56a14d93f0d0e8928b","379edeaa9ed92ebe6091177417b2c751","613068422c214b944c7b2e3fb60412ed99d35c9e18d53d45b16965c5a36f734a","3233db78e37302b47436b550a21cdaf9","9ce32ce5e2b70fec7f749e7868d89a4e3e739fed9c75cd6c4ec6eafde4c3711a","d0d1fba6bb7be933889ace0d6955a1d7","142c6a4c7e9efbf6f3176df3ff218449bb4f7b2a69d60060e6339f1c3cc95d93","2462db3be57df824f003f74d7a16cacb","e21396bf5f9936310b4f53273db330a9620d78c1c744277b0e9126f0afdbc29d","8d7c43913eba26f96cd656966c1e26d5")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://investigation04.session-out.com/fbd901_harassment/doc.rtf","https://reports.dgps-govtpk.com/63645534-case/doc.rtf","https://salary-cutting.session-out.com/37656199_notice/doc.rtf","https://mailarmylk.mods.email/ltr86-ef2265ef","https://moitt-gov-pk.fia-gov.net/643705null","https://mofa-gov-sa.direct888.net/015094_consulategz","https://moitt-gov-pk.fia-gov.net/720705null","https://heatwave.paknavy.store/pn/510426/doc.rtf","https://mora.pdfadobe.com/d8149d32/mora/doc.rtf")
