index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("C96558312FBF5847351B0B6F724D7B3A31CCAF03","1403241C415A8D686B1148FA4229A2EB833D8D08","38D0E92AFF991CFC9C68D7BAAD6CB85916139AF5","AF978ED8AD37CE1437A6B42D96BF518D5C4CFD19","B70F3A3A9B5B8506EE95791469CA496E01AD7DAF","014421BDB1EA105A6DF0C27FC114819FF3637704","EA298866E5A61FEEA4D062987F23B10A78C8A4CA","021B9E2E8AA30B29569254C0378A9F43E4F32EEC","2A2F08FAD6B0A86DC94885224687D954E739CC21","3658B7CCA13C8C8AD03E9B6AEFE4B9CBE48E3C81","517488F6BD0E7FC9EDE82F37226A75212B277E21","C05B4AD7A3322917E17710842FB88A090198D51F","DB2DF1BDF8145CB8ABA3A2026A3CC3EF4F1762BE","EDE2AB811311FC011B1E89C5A0B7A60C123B7398","7AA35BA7030AFCD271436DE8173D7B2F317A1BFC","A5C02ABE698300F3DE0B7CC7F0856652753831DA","613C4AFAE8F5F80F22DCD1827E3230FCA361ADA5","859CD6DFDADAB3D6427C6C1C29581CB2094D648F","DBEA7F0C0D2BF8BC365A2D1572CA1538FE8FB9A3","ADD5B4FD9AEA6A38B5A8941286BC9AA4FE23BD20","7BA42061568FF6D9CA5FE5360DCE74C25EA48ADA","D81215890703C48B8EA07A1F50FEC1A6CA9DF88B","F359D3C074135BBCA9A4C98A6B6544690EDAE93D","621B31D5778EC2FB72D38FB61CED110A6844D094","BC11DC8D86A457A07CFE46B5F2EF6598B83C8A1F","C369E1466F66744AA0E658588E7CF2C051EE842F","B868764C46BADC152667E9128375BA4F8D936559","BDECA89B4F39E6702CE6CBBC9E6D69F6BBAB01C8","5379FBB0E02694C524463FDF7F267A7361ECDD68","6CC6170977327541F8185288BB9B1B81F56D3FD0","D95185A4A3F8512D92F69D2ED7B8743638C54BE8","BE7F0E41CD514561AED43B07AA9F5F0842BF876C","7F663F50E9D6376715AEB3AB66DEDE038258EF6C","BEDA1224B3BB9F98F95FF7757D2687F4D9F4B53A","2B61E7C63A0A33AAC4CF7FE0CEB462CF6DACC080","EF3C796652141B8A68DCCF488159E96903479C29","6B547C244A3086B5B6EA2B3A0D9594BBE54AE06B","4CDCE3AF614C2A5E60E71F1205812AB129C0955B")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "cahe.microsofts.com" OR destinationhostname CONTAINS "ffca.caibi379.com" OR destinationhostname CONTAINS "smtp.nsfwgo.com" OR destinationhostname CONTAINS "dlaxpcmghd.com" OR destinationhostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "cahe.microsofts.com" OR sourcentdomain CONTAINS "ffca.caibi379.com" OR sourcentdomain CONTAINS "smtp.nsfwgo.com" OR sourcentdomain CONTAINS "dlaxpcmghd.com" OR sourcentdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "cahe.microsofts.com" OR sourcehostname CONTAINS "ffca.caibi379.com" OR sourcehostname CONTAINS "smtp.nsfwgo.com" OR sourcehostname CONTAINS "dlaxpcmghd.com" OR sourcehostname CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "cahe.microsofts.com" OR destinationntdomain CONTAINS "ffca.caibi379.com" OR destinationntdomain CONTAINS "smtp.nsfwgo.com" OR destinationntdomain CONTAINS "dlaxpcmghd.com" OR destinationntdomain CONTAINS "wwww.dlmum.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="DNS / DHCP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="DNS / DHCP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="DNS / DHCP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Endpoint management systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Microsoft Windows" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Microsoft Windows" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Microsoft Windows" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Microsoft Windows" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Microsoft Windows" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Services / Applications" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / VPN" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Content Management System" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Content Management System" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Content Management System" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Content Management System" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Network Access Control / NAC" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Network Access Control / NAC" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Network Access Control / NAC" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Network Access Control / NAC" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Virtualization / Containers" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Virtualization / Containers" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Virtualization / Containers" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Virtualization / Containers" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Privileged User" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Privileged User" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Privileged User" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Privileged User" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Privileged User" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Identity Management" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Identity Management" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Identity Management" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Identity Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Access / Identity Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Identity Access Management" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Identity Access Management" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Identity Access Management" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Identity Access Management" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Identity Access Management" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Application / Enterprise / SaaS" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / WiFi" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND ipaddress NOT NULL AND ipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND translatedipaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedaddress IN ("43.254.216.104","45.124.115.103","161.82.181.4","43.254.219.153","154.223.141.36","103.139.2.93","45.124.115.103","185.225.19.17","94.158.245.249","5.252.179.227","222.186.151.141","47.111.22.65","114.55.109.199","185.225.17.39")
