index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring64 NOT NULL AND customstring64 IN ("3e150b3a958f67da3a821e468c3f3f72b4404dfba207158343589eab24c0074a","69bd5f29178b163082d9114ac996c5fc631700042348c07025905a172910d194","4f1a84d8a870a63bc255303d47f86a604b4233a97a49f4f26fc9b958d94ed24f","a6b75518b8e82e0990fd3510e803c76afdf56fe205c4bed27b74263f33e74aea","e1a02fabd6c23c16aa0d95bcffa2578fe008f003a293941e9db426ee4ae30b3a","00d029276eff4aa93ef5b736f2cc8e01658d1d9dcabf0356e32248c63c3b0222","8020e944bea4e2c2d8d3a95abd805b68c0627b4e7a7a14812df8e714a9321f45","c90dda7e0bd8f2947160f8ab3825897df4f2e4a36498ca5016db6db0c7164311","97b7cf5bf4cadde3bd8745e3347bb9707a43cb816f21a062eaf3010b6768a551","cf3727cbc326f0d37c0adf0c1d13e97d6723d767c43236a7fe2a71169ce4e030","aac338d4f543a930e5f464042d43a616d3ce972aa4568648f981d34664b97709","001e9bd6b2aebb2b089ceb8ebe1488c66765c10d365ceffa77d67cedecea8c33","5c8186097677ae054afe689a14394b4171fcea8172d419842157de07f2b42fda")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Endpoint Management Systems" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Endpoint Management Systems" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Proxy" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Proxy" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Proxy" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Next Generation Firewall" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Next Generation Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Next Generation Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Flow" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Flow" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Flow" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Server" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Server" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Server" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Application Security Broker" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Source Code Repository" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Source Code Repository" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Source Code Repository" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / VPN" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / VPN" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / VPN" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Authentication / VPN" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Content Management System" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Content Management System" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Content Management System" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Content Management System" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Services / Applications" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Services / Applications" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Services / Applications" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Cloud Services / Applications" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Web Application Firewall" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND requesturl NOT NULL AND requesturl IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Message NOT NULL AND Message IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND Requestcontext NOT NULL AND Requestcontext IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND customstring3 NOT NULL AND customstring3 IN ("https://saidecommunity.org/assets/js/menkind.php","https://saidecommunity.org/assets/js/meningina.php","https://saidecommunity.org/assets/js/agent1.ps1","https://saidecommunity.org/assets/js/agent3.ps1","https://saidecommunity.org/assets/js/mendipite.exe","https://saidecommunity.org/assets/js/sd2.ps1","https://saidecommunity.org/assets/js/sd4.ps1")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Endpoint Management Systems" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Endpoint Management Systems" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Source Code Repository" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Source Code Repository" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Source Code Repository" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Source Code Repository" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Content Management System" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Next Generation Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Proxy" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Proxy" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Proxy" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Flow" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Flow" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Flow" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Flow" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Server" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Server" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Server" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Server" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Web Application Firewall" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Services / Applications" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Application Audit" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / VPN" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / VPN" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Authentication / VPN" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Authentication / WiFi" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationaddress NOT NULL AND destinationport NOT NULL AND (destinationaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND sourceaddress NOT NULL AND sourceport NOT NULL AND (sourceaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND translatedipaddress NOT NULL AND sourceport NOT NULL AND (translatedipaddress="195.123.218.40" AND sourceport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND destinationtranslatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND destinationtranslatedport=80)
index=activity AND rg_functionality="Firewall / NGFW / WAF" AND destinationtranslatedaddress NOT NULL AND translatedport NOT NULL AND (destinationtranslatedaddress="195.123.218.40" AND translatedport=80)
