index=activity AND rg_functionality="Endpoint Management Systems" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Endpoint Management Systems" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Endpoint Management Systems" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Email / Email Security" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Email / Email Security" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Email / Email Security" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Cloud Email / Email Security" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND filehash NOT NULL AND filehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND oldfilehash NOT NULL AND oldfilehash IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND customstring3 NOT NULL AND customstring3 IN ("5675473bb46fad83c92865c9c6afbd5e","00fdb03518c238dc649a39e94f0bcc95dacf3b832979d14d0ed5194b9b482b87","c71f41f71e0beea474049af497eae7b7","cffc6a854632d979e3c12d4c29835490229db79909b18010d3dbaabbb89ad2cc","88c2f95bb1e008e2952799a427ab8492","bc92a5b1c4205ea1fbfec9144b8aab485e095142c7105c9d616b089ec668f198","24a95b0c3d0bab9451e49ebd2a95efb4","c40e6b176ad3fd7332cd217191e557352ef4b82bf91f29939121267598737990","050a2254623b88bdd5d171715542bee1","8a9262fecbb58364982f38bdefd44336005632079e254e6f82693050fa29c403","3249773213e0a41ed4d49174ad651f28","664723f55237e2d14b39938878fd0a3744cc808d4d3e67e22f1bcbd410960557")
index=activity AND rg_functionality="Endpoint Management Systems" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Web Proxy" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Next Generation Firewall" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Flow" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Web Server" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Cloud Email / Email Security" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Web Application Firewall" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Cloud Application Security Broker" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Source Code Repository" AND requesturl NOT NULL AND requesturl IN ("https://onyangdol.site/thumb_d_F3D14F4982A256B5CDAE9BD579429AE7.jpg")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint Management Systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Antivirus / Malware / EDR" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Email / Email Security" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Proxy" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Flow" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Server" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Endpoint DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Data Loss Prevention / Network DLP" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Web Application Firewall" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint management systems" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Endpoint management systems" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Audit" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Audit" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Unix / Linux / AIX" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Authentication / SSO / Single Sign-On" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Cloud Application Security Broker" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "onyangdol.site" OR destinationhostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcentdomain NOT NULL AND (sourcentdomain CONTAINS "onyangdol.site" OR sourcentdomain CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND sourcehostname NOT NULL AND (sourcehostname CONTAINS "onyangdol.site" OR sourcehostname CONTAINS "ftp.artrsllc.com")
index=activity AND rg_functionality="Source Code Repository" AND destinationntdomain NOT NULL AND (destinationntdomain CONTAINS "onyangdol.site" OR destinationntdomain CONTAINS "ftp.artrsllc.com")
