index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("fb6e4f75763fad6d0e7fe85a563b0c24","7e8543f2bc09bf320510fde5e34e32065339d9d2","873dd1dcdfcbe9826b274c5880f5be81a878ee93715fbb18a654d9dba61c5dfc","deb24dfaf8178fda2d070aba9134a30c","ecc0b26106703e129fb1e2ec132c373870c2e7b6","f94048917ac75709452040754bb3d1a0aff919f7c2b4b42c5163c7bdb1fbf346","4f4ee823a8c7e2511f05b3ea633c0d2c","877515fecc14ed193167e8a20c6b9a684a74564d","ecc7f13c3f0f8d4775e05715810b0164c52b7bd233e4a2e4f5a37769becb0092","25b38e45df3cd215386077850c59be07","a88a28c73aa42956c9f9d12585a8de63d4a00e47","68dd1a2da732d56b0618f8581502fcf209b1c828c97d05f239c98d55bb78b562","1b8b4f05058ac39091b99cc153ab00c0","e0b568a3e35257cd30b0c42727c3529cef13b081","831955bd05186381a8f15539a41f48166873eab3feb55fb1104202e4152bd507","f769cb73317421c290832777c9e14f92","f043898fc9db6985c4ad8bb84669c081cdaa8e6f","40c40495434bf987b04f0742c3e9201189675d87a042aa72abbd0084c3de66d8","49145e436aa571021bb1c7b727f8b049","9f9c7b2c8f245e62a08bf5f8a3eb3498","3cf851eb09c934cafe9b98d4706f903dff804b0c","aad75498679aada9ee2179a8824291e3b4781d5683c2fa5b3ec92267ce4a4a33","49145e436aa571021bb1c7b727f8b049","a617e6687ab5d747c530b930bb4a3209","d53e550b54c08606e19965a9f74bbaa7063e10f1","be3222219f029b47120390b2b1ad46ae86287e64a1f7228d6b2ffd89345a889e","49145e436aa571021bb1c7b727f8b049","e9fc0203d1dea15dff56a285d0f86b62","72076af2ce8df6f8b1121c38f3c3db043c540369","792a95234b01c256019b16a242b9487b99e98ed8a955eaecf1e44b0141aa12f4","49145e436aa571021bb1c7b727f8b049")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://hrclubphilippines.com/xmlrpc.php","https://mediacratia.ru/xmlrpc.php","https://daraltanweer.com/xmlrpc.php","https://ukrainians.today/xmlrpc.php","https://my-little-kitchen.com/xmlrpc.php","https://montages.no/xmlrpc.php","https://pocketofpreschool.com/xmlrpc.php","http://blog.lilianpraskova.cz/xmlrpc.php","https://sitmeanssit.com/xmlrpc.php","http://artmodel.com.ua/xmlrpc.php")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="91.215.85.143" AND destinationport=443 OR destinationaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="91.215.85.143" AND sourceport=443 OR sourceaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="91.215.85.143" AND sourceport=443 OR translatedipaddress="91.92.136.20" AND sourceport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND destinationtranslatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND destinationtranslatedport=4001)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="91.215.85.143" AND translatedport=443 OR destinationtranslatedaddress="91.92.136.20" AND translatedport=4001)
