index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("330b01256efe185fc3846b6b1903f61e1582b5a5127b386d0542d7a49894d0c2","e9084037805a918e00ac406cf99d7224c6e63f72eca3babc014b34863fb81949","22e033c76bb1070953325f58caeeb5c346eca830033ffa7238fb1e4196b8a1b9","e6357f7383b160810ad0abb5a73cfc13a17f4b8ea66d6d1c7117dbcbcf1e9e0f","f398740233f7821184618c6c1b41bc7f41da5f2dbde75bbd2f06fc1db70f9130")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://baronrtal.com/img/logo.jpg","https://bunadist.com/img/logo.jpg","https://omnimature.com/img/logo.jpg","https://vorkinal.com/img/logo.jpg","https://bunadist.com/images/logo.jpg","https://curanao.com/images/logo.jpg","https://goranism.com/images/logo.jpg","https://olodaris.com/images/logo.jpg","https://storage.googleapis.com/oieqeh1cxwnd81.appspot.com/bl/file/sh/0/fWpa4HT4ck6v6.html?l=827470894993112750","https://storage.googleapis.com/pz3ksj5t45tg4t.appspot.com/q/pub/file/0/filejBWdkst6Ua3s.html")
