index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("36d0c2e7f20f3ff81c4e7f25b66551f1dd2d736775e0994d39aca4c73cb658bb","7b2d1dc5fecb9e8821545af477721b45b4b4817adced81c78479e53c2e3028f5","9294279b158b48a5ac498070d4687e37f6efdac460684fc6cc30eee875cd1257","ab9ecfc10f1e537e2c4a31da2b9ffd7fd0d696b59eb72da48ae2d11df639d120","42b9f3c3b5cf44db9e371093e400fc087a9b7324b4875f4eef5efbde3b984157","618bf81ba49b99210ea91fe359daf420596b58f37636d8dea1bf012ce081d1ae","4c85469c2d3a8871a767df084db3216988b213e4c1928a1b8133aca3874765de","9a02ea9ef7ffe6d1372bd099336ea414386d5041c78151f3b71ff33b0d307f74","0db693472b4ca6f3ec1effc03d47c288f15ed06b7d4e172f8192047d3e800db1","723ac2c81529c534e97cfd73d89b2479dfc34909c4814324b71147b391896979","791845e2c97b9a70f35075be963a88f0410201145953179303a4c689ccd8ac4a","d844221b683b4308b60fe80e23e6e3e618e07d36381b03da746e580e805d1814","84b3c700ebdb8da0dde2ee19c88e957389051d484386d2859d27dc56b6c30157","496924a13efee60c314947f296d6095b07a1ef6920fcc502d06ffa6c4a9a32e1","b93821edca20bd777e3f4a17aac0f9e5d4ddb351bdf2ba7ce1b0eecc7e3890f2","aeb95fd2613e369ee8a885124dc4f717d21a337216f75101f5066ed48bc48ca3")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("http://194.180.48.211/zarath/found.dwp","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://194.180.48.211/zarath/clgrri242.bin","http://176.113.115.81/9kdmsxq/index.php","http://194.180.48.211/zarath/investor15.snp","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://194.180.48.211/zarath/nnuzpakgethwygwkg104.bin","http://176.113.115.81/9kdmsxq/index.php","http://38.242.193.23/1.exe","http://194.180.48.211/frog/dnsjrjnsci193.sea","http://38.242.193.23/private/radios.exe")
