index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","1def14848c5cc60c1626eabe5646d160","3158798eddffe1a29de4a3d10a30c6f0edb2785f","b67dfd4a818d10a017a4d32386cf4cd2a3974636bed04f27e45de6ada86a56d2","015056655d15155118z4dnz6fz","e690c1c74f539af877f3ce68cd82034a675e3071bad88aedb6f33d4c99b62855","038f7a2515a3b010134cf22cd240b658","1e286220d414ababed946cedaca77f75","4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df","0c0195c48b6b8582fa6f6373032118da","d25340ae8e92a6d29f599fef426a2bc1b5217299","11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5","a7bafac5ed29a68e0fff6eecc3f5bb3f","4f19b6970e35b3d20f84a91e3af0d82c68096710","428d06c889b17d5f95f9df952fc13b1cdd8ef520c51e2abff2f9192aa78a4b24","91931a2b1ae645004023e1b35fe57314","9f5a7a293c92ef42374cf1471b653ed994446c15","4905b7776810dc60e710af96a7e54420aaa15467ef5909b260d9a9bc46911186","e579cd176b384b38eda6a0c61c51c274","8a3b31ac12d9ac1a44707b1de75b8870189db83a","d3c3f529a09203a839b41cd461cc561494b432d810041d71d41a66ee7d285d69","88fba011db6e5122f4aa2c0343e11275","a2d34aeee2fb7c1ba57a11c03cc33e76f1217548","cfa12bb31d58d30875b7a20ed05b5c100032b6a18802fbdf3913e70288e11a55","0c8622c4871541e89d0173d5be0db8aa","b01a88df39857417233d9bd3256f82d0fdcc63f8","beda317d74b8f1090e251205064e686d330a0502006a54dc94d528d6bd16c416")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("http://www.bathome.net/thread-48526-1-1.html")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Content Management System" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Content Management System" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Content Management System" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Content Management System" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "crypto-pool.fr" OR destinationhostname CONTAINS "minergate.com" OR destinationhostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "crypto-pool.fr" OR sourcentdomain CONTAINS "minergate.com" OR sourcentdomain CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "crypto-pool.fr" OR sourcehostname CONTAINS "minergate.com" OR sourcehostname CONTAINS "mymst007.info")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "crypto-pool.fr" OR destinationntdomain CONTAINS "minergate.com" OR destinationntdomain CONTAINS "mymst007.info")
